WCVendors vulnerabilities
4 published CVEs name WCVendors among the affected products.
- 4Published CVEs4 of them scored
- 3Last 12 monthspublished in the last year
- 0Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-66625
WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - SQL Injection vulnerability
WCVendors · WC Vendors Marketplace
High7.6 - CVE-2026-15351
WC Vendors <= 2.7.0 - Authenticated (Shop Manager+) SQL Injection via 'status' Parameter
wcvendors · WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors
Medium4.9 - CVE-2025-12130
WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors <= 2.6.4 - Cross-Site Request Forgery to Vendor Product Deletion
wcvendors · WC Vendors – WooCommerce Multivendor, WooCommerce Marketplace, Product Vendors
Medium4.3 - CVE-2025-49263
WordPress WC Vendors Marketplace plugin <= 2.5.6 - SQL Injection Vulnerability
WCVendors · WC Vendors Marketplace
High7.6